| Commit message (Collapse) | Author | Age | Files |
|---|
| | |
|
| |
|
|
|
|
|
|
| |
services.openssh.settings.PasswordAuthentication = false was enabled
with no authorized key ever provisioned for the tom user, locking out
all SSH access on the first real host (floep). Adds the public keys
from https://github.com/tomvanderlee.keys as static literals -- a
one-time fetch, not a build-time network dependency, to stay pure.
|
| |
|
|
|
|
|
|
| |
home-manager.useUserHomeDirectory was never a real option -- a mistake
that slipped through because this file was never actually evaluated
until a live nixos-rebuild switch surfaced it today. Corrected to
useUserPackages, the standard option that pairs with useGlobalPkgs for
NixOS+home-manager integration (also what Nix's own error suggested).
|
| |
|
|
|
|
|
|
| |
Pins nixpkgs (nixos-unstable) and home-manager to the revisions
resolved by the first successful nix flake check, run on a Linux
machine since Nix still isn't installed on this Mac. Without this
committed, every future check/build would silently re-resolve input
versions instead of using pinned ones.
|
| |
|
|
|
|
|
|
| |
Rename nixfmt-rfc-style to its current canonical name nixfmt, and add
meta.description to the bootstrap-host app to clear its warning.
Records the first successful `nix flake check` run (on a Linux machine
with Nix, since this Mac still doesn't have it) across all four
implemented changes so far — no errors, only these now-fixed warnings.
|
| |
|
|
|
|
|
| |
Planning artifacts only (proposal, spec, design, tasks) — GDM+GNOME,
NetworkManager, PipeWire, and CUPS+Avahi printing, applied
unconditionally to every NixOS host via modules/nixos/common.nix. Not
yet implemented.
|
| |
|
|
|
|
|
|
|
|
| |
modules/home/dev-tools.nix provisions the developer's evidenced most-
used CLI/client tooling (gh, tmux, htop, yq-go, tree-sitter, docker,
docker-compose, kubectl, awscli2). modules/home/shell.nix drops zsh/
starship/direnv in favor of bash + liquidprompt, both left entirely to
the user's own dotfiles for config since home-manager can't own
~/.bashrc without conflicting with it. modules/nixos/common.nix adds
sshd (key-only auth) and a firewall baseline for future NixOS hosts.
|
| |
|
|
|
|
|
|
|
|
| |
modules/home/dotfiles.nix clones ~/dotfiles on activation (only if not
already present) and stows every top-level package directory into
$HOME, independently per package so one conflict doesn't block the
rest. Removes home-manager's own git config management in favor of
letting the stowed ~/dotfiles/git/.gitconfig own it, and adds
homeConfigurations."tom@darwin" so the feature is usable on this Mac.
users/tom.nix now points home.dotfiles.repoUrl at the real repo.
|
| |
|
|
|
|
|
|
|
|
| |
nixosConfigurations now auto-discovers hosts/<name>/ directories instead
of a hand-maintained attrset, and scripts/bootstrap-host.sh (exposed as
`nix run .#bootstrap-host`) scaffolds a new host from the template. The
script always requires an explicit --root for hardware-configuration.nix
so a live-installer run can never read the live ISO's own /etc/nixos by
accident. Also records the belated task-11.1 checkbox update for the
prior change's already-committed state.
|
|
|
Adds a flake providing shared modules for NixOS and standalone
home-manager, a copyable NixOS host template, and the OpenSpec
tooling/change scaffolding used to plan this work.
|
Tom van der Lee